The Computer Merchant, Ltd.
bd_08dc2d6569d82510 · schema v1 · pii pii-v1
Full breach record for The Computer Merchant, Ltd. →The Computer Merchant, a Massachusetts-based IT staffing and payroll solutions provider, notified the New Hampshire Attorney General of a July 2024 cyberattack. The incident involved a ransomware attack where an unauthorized third party acquired personal information, including names, addresses, and Social Security numbers, for 366 New Hampshire residents. The company discovered the data was posted on the dark web in January 2025. Notification letters were mailed starting August 19, 2025, offering one year of IDX credit monitoring. The company reset passwords, rebuilt systems, and deployed additional safeguards.
Linked disclosures
Why this link?Ransomware claims (2)
- bd_6d00600f90f10c7cLeak Siteplayfiled 2024-07-15(402d gap)Verified
- bd_29f325ee9c9bd6f7Leak Siteplayfiled 2024-06-28(419d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_2b56afa7cd461874California State AGfiled 2025-08-21Verified
- bd_59bcb7c5698db8fdVermont State AGfiled 2025-08-19(2d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/computer-merchant-20250821.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 21, 2025
- Raw hash
- 845074c38867009aa6059fc70d71cb2205e3312ebd9afc56fb3a408625802794
Reporting entity
- Name
- The Computer Merchant, Ltd.norm: the computer merchant
- Domain
- itstaffing.com
Victim entity
- Name
- The Computer Merchant, Ltd.norm: the computer merchant
- Domain
- itstaffing.com
Incident
- Discovered
- Jan 1, 2025
- Materiality determined
- —
- Notification sent
- Aug 19, 2025
- Affected individuals
- 366
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 33 weeks(232 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.